I can't login via http stream #344

5 Answer(s)

• 

  0

  liangshiwei created 4 years ago

  Support Team Fullstack Developer

  Hi,

  Please see https://docs.microsoft.com/en-gb/dotnet/core/compatibility/3.0-3.1#http-browser-samesite-changes-impact-authentication and discuss aspnetcore : https://github.com/dotnet/aspnetcore/issues/14996. This is the default behavior of chrome.

  Update the ConfigureAuthentication method of the **YourProjectName**WebModule class. like:

  context.Services.AddAuthentication()
  .AddIdentityServerAuthentication(options =>
  {
      options.Authority = configuration["AuthServer:Authority"];
      options.RequireHttpsMetadata = false;
      options.ApiName = "qa";
  }) 
  // add this
  .Services.ConfigureApplicationCookie(options =>
  {
      options.Cookie.SameSite = SameSiteMode.Unspecified;
  });
  

  However, recommend you to use https.

  Save Cancel
• 

  0

  gvnuysal created 4 years ago

  Hi @liangshiwei thanks your answer

  Save Cancel
• 

  0

  robb created 4 years ago

  I had this problem today--affected both HTTP and HTTPS in absolute latest version of Chrome

  Firefox was OK but still complained in console warnings about SameSite cookies

  I implemented the above code change as recommended by liangshiwei and it seems to have corrected the problem

  Is the recommended code change a permanent solution or only a temporary workaround?

  Save Cancel
• 

  0

  liangshiwei created 4 years ago

  Support Team Fullstack Developer

  Hi @robb@designitcorp.ca, You should use https as the solution, If you really want to use http, you need to check the browser and set the samesite, See https://github.com/IdentityServer/IdentityServer4/issues/4165

  Save Cancel
• 

  0

  robb created 4 years ago

  I am using HTTPS

  I still had to make the above code change to get it to work

  Save Cancel